[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
ipf & kernel options/pseudo-devices UPDATE
update... attached is kernel config
------
hiya,
I'm trying to build a custom kernel for my gateway machine here running
2.8-stable.
I tried to disable (or remove) everything that is not necessary, so I have
the smallest possible kernel while maintaining all the functionality I
need (and have in the GENERIC kernel).
Somehow I think I must have disabled too many options, because every time
I reboot the machine with a new, custom kernel, I can't use ipf and
therefor i can't use ipnat. E get the following output with the ipfstat
and ipnat programs:
[root][/root]# ipfstat
ioctl(SIOCGETFS): Invalid argument
[root][/root]# ipnat -l
ioctl(SIOCGNATS): Invalid argument
(Yes, i'm running those as root)
Could someone give me a list of kernel options (besides INET, IPFILTER and
IPFILTER_LOG) and pseudo-devices i need to run ipf/ipnat? I think it might
have something to do with the filesystems I added support for (only FFS
and MSDOSFS) or with the number of bpfilter pseudo-devices (currently set
to 8).
If it is more convenient to forward the kernel options/pseudo-devices to
the list, please tell me and I will send it. (i will not include the
normal devices...)
NOTE: I can use my normal network interfaces (local network & cable
internet connection).
Thanks in advance,
//Wouter Clarie
# POSITRON kernel, speed...
# last change: 01/22/2001
machine i386 # machine architecture
maxusers 10 # maximum number of users
config bsd swap generic
option I486_CPU # cpu class
option UVM # use UVM virtual memory system
option GPL_MATH_EMULATE # floating point emulation
option TIMEZONE=0 # time zone to adjust RTC time by
option DST=0 # daylight savings time used by RTC
option SWAPPAGER # paging
option DEVPAGER # mmap() of devices
option DUMMY_NOPS # speed hack
option CRYPTO # Cryptographic framework
option SYSVMSG # System V-like message queues
option SYSVSEM # System V-like semaphores
option SYSVSHM # System V-like memory sharing
option LKM # loadable kernel modules
option FFS # UFS - OpenBSD native filesystem
option MSDOSFS # fat filesystem support (diskettes)
option FIFO # FIFOs
option INET # IP + ICMP + TCP + UDP
option IPFILTER # IP packet filter for security
option IPFILTER_LOG # use /dev/ipl to log IPF
option BOOT_CONFIG # add support for boot -c
option APM_NOPRINT # don't print apm messages
pseudo-device loop 1 # network loopback
pseudo-device bpfilter 8 # berkeley packet filter
pseudo-device pty 64 # pseudo-terminals
# HARDWARE CONFIGURATION
mainbus0 at root # mainbus
bios0 at mainbus0 # bios device
isa0 at mainbus0 # isa bus
isadma0 at isa?
isapnp0 at isa?
vt0 at isa? port 0x60 irq 1 # console terminal driver
pcppi0 at isa?
sysbeep0 at pcppi?
pccom0 at isa? port 0x3f8 irq 4 # serial port 1
pccom1 at isa? port 0x2f8 irq 3 # serial port 2
lpt0 at isa? port 0x378 irq 7 # parallel port
fdc0 at isa? port 0x3f0 irq 6 drq 2 # fdd controller
fd* at fdc? drive ? # fdd
wdc0 at isa? port 0x1f0 irq 14 flags 0x00 # ide harddisk controller
wd* at wdc? channel ? drive ? flags 0x0000 # ide harddisks
ne0 at isa? port 0x240 irq 12 # ne2000 NIC drivers
ne1 at isa? port 0x300 irq 10
ne* at isapnp?